lychee/php/modules/photo.php

<?php

/**
 * @name        Photo Module
 * @author      Philipp Maurer
 * @author      Tobias Reich
 * @copyright   2014 by Philipp Maurer, Tobias Reich
 */

if (!defined('LYCHEE')) exit('Error: Direct access is not allowed!');

function getPhoto($photoID, $albumID) {

	global $database;

	$query	= "SELECT * FROM lychee_photos WHERE id = '$photoID';";
    $result = $database->query($query);
    $return = $result->fetch_array();

    if ($albumID!='false') {

    	if ($return['album']!=0) {

    		$result = $database->query("SELECT public FROM lychee_albums WHERE id = '" . $return['album'] . "';");
    		$return_album = $result->fetch_array();
    		if ($return_album['public']=="1") $return['public'] = "2";

    	}

    	$return['original_album']	= $return['album'];
    	$return['album']			= $albumID;
    	$return['sysdate']			= date('d M. Y', strtotime($return['sysdate']));
    	if (strlen($return['takedate'])>0) $return['takedate'] = date('d M. Y', strtotime($return['takedate']));

	}

	unset($return['album_public']);

    return $return;

}

function setPhotoPublic($photoID, $url) {

	global $database;

    $result	= $database->query("SELECT public FROM lychee_photos WHERE id = '$photoID';");
    $row	= $result->fetch_object();
    $public = ($row->public==0 ? 1 : 0);
    $result = $database->query("UPDATE lychee_photos SET public = '$public' WHERE id = '$photoID';");

    if (!$result) return false;
    return true;

}

function setPhotoStar($photoIDs) {

	global $database;
	
	$error	= false;
    $result	= $database->query("SELECT id, star FROM lychee_photos WHERE id IN ($photoIDs);");
    
    while ($row = $result->fetch_object()) {
        
        $star = ($row->star==0 ? 1 : 0);    	
    	$star = $database->query("UPDATE lychee_photos SET star = '$star' WHERE id = '$row->id';");
    	if (!$star) $error = true;
    	
    }
    
    if ($error) return false;
    return true;

}

function setPhotoAlbum($photoIDs, $albumID) {

	global $database;

    $result = $database->query("UPDATE lychee_photos SET album = '$albumID' WHERE id IN ($photoIDs);");

    if (!$result) return false;
    return true;

}

function setPhotoTitle($photoIDs, $title) {

	global $database;

    if (strlen($title)>50) return false;
    $result = $database->query("UPDATE lychee_photos SET title = '$title' WHERE id IN ($photoIDs);");

    if (!$result) return false;
    return true;

}

function setPhotoDescription($photoID, $description) {

	global $database;

    $description = htmlentities($description);
    if (strlen($description)>1000) return false;
    
    $result = $database->query("UPDATE lychee_photos SET description = '$description' WHERE id = '$photoID';");

    if (!$result) return false;
    return true;

}

function setPhotoTags($photoIDs, $tags) {

	global $database;
	
	// Parse tags
	$tags = preg_replace('/(\ ,\ )|(\ ,)|(,\ )|(,{1,}\ {0,})|(,$|^,)/', ',', $tags);
	$tags = preg_replace('/,$|^,/', ',', $tags);
	
	if (strlen($tags)>1000) return false;

	$result = $database->query("UPDATE lychee_photos SET tags = '$tags' WHERE id IN ($photoIDs);");

	if (!$result) return false;
	return true;

}

function deletePhoto($photoIDs) {

	global $database;
	
	$result = $database->query("SELECT id, url, thumbUrl FROM lychee_photos WHERE id IN ($photoIDs);");
	
	while ($row = $result->fetch_object()) {
	
		// Get retina thumb url
		$thumbUrl2x = explode(".", $row->thumbUrl);
		$thumbUrl2x = $thumbUrl2x[0] . '@2x.' . $thumbUrl2x[1];
		
		// Delete files
		if (!unlink('../uploads/big/' . $row->url))			return false;
		if (!unlink('../uploads/thumb/' . $row->thumbUrl))	return false;
		if (!unlink('../uploads/thumb/' . $thumbUrl2x))		return false;
		
		// Delete db entry
		$delete = $database->query("DELETE FROM lychee_photos WHERE id = $row->id;");
		if (!$delete) return false;
		
	}
		
	if (!$result) return false;
	return true;

}

function isPhotoPublic($photoID, $password) {

	global $database;

	$query = "SELECT public, album FROM lychee_photos WHERE id = '$photoID';";

    $result	= $database->query($query);
    $row	= $result->fetch_object();
    
    if ($row->public==1) return true;
    else {
    	$cAP = checkAlbumPassword($row->album, $password);
    	$iAP = isAlbumPublic($row->album);
    	if ($iAP&&$cAP) return true;
    	return false;
    }

}

function getPhotoArchive($photoID) {

	global $database;

	$result	= $database->query("SELECT title, url FROM lychee_photos WHERE id = '$photoID';");
	$row	= $result->fetch_object();

	$extension = array_reverse(explode('.', $row->url));

	if ($row->title=='') $row->title = 'Untitled';

	header("Content-Type: application/octet-stream");
	header("Content-Disposition: attachment; filename=\"$row->title.$extension[0]\"");
	header("Content-Length: " . filesize("../uploads/big/$row->url"));

	readfile("../uploads/big/$row->url");

	return true;

}

?>